This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json) Hash identifier: zYIAt/LaSNFiFqb9bGGn/2Xf/Krg7wJONn+C8NYf7LU= Subject key identifier: 22:CE:FB:F1:48:7E:49:55:53:AB:61:B8:AE:B3:31:BC:B2:B1:C3:8A Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5 Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5 Certificate serial: 019AF163D168595716EF54F3DC3E2C925FF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 02:00:41 +0000 Manifest this update: Sat 06 Dec 2025 02:00:41 +0000 Manifest next update: Sun 07 Dec 2025 02:00:41 +0000 Files and hashes: 1: BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa (hash: 72PY3Qqmz1maPY+ZM8ykIYNT4ZWmcAK3NGiS506bQm0=) 2: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: 1OnBf2cck1axwc1I+UlBbneOtnAZHBsARHzfBBq/ZJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d1:68:59:57:16:ef:54:f3:dc:3e:2c:92:5f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5 Validity Not Before: Dec 6 02:00:41 2025 GMT Not After : Dec 7 02:00:41 2025 GMT Subject: CN=22cefbf1487e495553ab61b8aeb331bcb2b1c38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:da:87:16:f1:6b:c8:eb:6d:f0:8e:90:27: b7:5c:42:ae:f2:50:12:0c:ac:d3:0d:45:bf:bc:83: cb:e4:f6:44:06:a4:f6:f0:e1:b2:13:b5:91:7c:0e: 2c:53:62:ec:91:b0:10:7f:a4:39:4c:bd:17:2c:1d: df:3b:d5:c8:53:4c:e4:97:65:99:f2:27:9b:cc:fe: 42:ec:a5:30:4f:9e:d1:83:1d:b9:a4:16:94:62:c3: ea:0d:3c:9a:7b:e0:dc:a6:a1:6f:5c:1c:df:d7:2c: fe:e6:79:e7:08:b1:84:e8:73:44:18:6e:e0:26:23: e0:74:85:46:1a:bd:ab:8b:1c:d0:45:27:0e:ec:f5: 27:47:0a:72:3e:cf:a4:01:71:5a:89:c0:62:67:24: ad:af:84:32:99:81:09:6f:93:f4:b6:80:0d:c5:6d: 1d:58:2f:dc:fe:be:9a:23:d2:14:a0:21:e1:d6:16: 63:f5:ba:7a:1e:38:0d:16:44:4d:90:19:44:0a:4f: 3b:b2:ab:94:11:9d:04:58:81:90:4f:47:b5:76:99: 2d:c7:ad:5d:db:53:b4:6d:0c:50:cd:64:d7:35:62: 6a:da:4f:2c:a8:3e:bc:7c:c3:a0:0a:bb:24:86:6d: c3:b3:cd:fc:fd:8b:7f:de:96:0b:7d:76:b7:74:60: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CE:FB:F1:48:7E:49:55:53:AB:61:B8:AE:B3:31:BC:B2:B1:C3:8A X509v3 Authority Key Identifier: keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:54:6e:00:76:d5:dd:bd:b8:b0:a0:55:59:5e:ac:4c:40:16: 40:c3:04:7e:a7:cc:ec:c6:c7:79:8e:e0:e4:59:9e:09:61:32: b7:03:50:b1:fa:de:e7:72:49:b6:85:df:55:8d:85:3f:f0:61: 35:84:96:be:19:23:04:64:89:46:92:d7:94:67:e1:ed:89:8e: 01:72:36:57:53:cf:9f:ce:60:de:2d:a2:b8:06:fc:2a:94:dd: 04:da:a8:80:78:23:91:d1:39:4c:cf:de:0b:48:8b:33:4d:8c: 22:8a:e7:19:41:1c:21:01:94:d8:c4:5c:dc:ce:d9:19:ab:51: be:8a:b6:c6:80:1e:aa:9d:c6:f7:e9:2e:91:e8:ed:fb:b6:8b: 38:7d:4c:98:00:2f:04:55:ef:43:31:5d:43:59:42:f1:fe:81: 7e:30:23:19:62:ee:8d:c4:89:9c:b5:ab:37:5b:78:24:6d:36: 6f:19:52:88:ab:a7:28:42:26:ad:c0:23:23:e0:8c:37:6c:64: ce:8b:a7:ef:1e:bc:54:ef:ed:40:d5:4b:ff:e7:76:26:db:a4: 55:29:eb:16:5d:ce:b0:97:e2:28:87:c7:d4:e8:41:72:7b:b4: 0d:22:f9:83:ae:9a:7b:9a:b9:52:87:02:64:a1:24:ce:43:18: 36:79:d2:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9FoWVcW71Tz3D4skl/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NGMwODM2ZGQ1YzczYjA3NzU5MDRlYWEzYjdlODdhNGEw YzBjZjUwHhcNMjUxMjA2MDIwMDQxWhcNMjUxMjA3MDIwMDQxWjAzMTEwLwYDVQQD EygyMmNlZmJmMTQ4N2U0OTU1NTNhYjYxYjhhZWIzMzFiY2IyYjFjMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BLahxbxa8jrbfCOkCe3XEKu8lAS DKzTDUW/vIPL5PZEBqT28OGyE7WRfA4sU2LskbAQf6Q5TL0XLB3fO9XIU0zkl2WZ 8iebzP5C7KUwT57Rgx25pBaUYsPqDTyae+DcpqFvXBzf1yz+5nnnCLGE6HNEGG7g JiPgdIVGGr2rixzQRScO7PUnRwpyPs+kAXFaicBiZyStr4QymYEJb5P0toANxW0d WC/c/r6aI9IUoCHh1hZj9bp6HjgNFkRNkBlECk87squUEZ0EWIGQT0e1dpktx61d 21O0bQxQzWTXNWJq2k8sqD68fMOgCrskhm3Ds838/Yt/3pYLfXa3dGAC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLO+/FIfklVU6thuK6zMbyyscOKMB8GA1UdIwQY MBaAFDRMCDbdXHOwd1kE6qO36HpKDAz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTBkYzMtNGNlZi00NGUzLWFlOTIt MTllMTM0NzEyZTkyLzEvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8wMTBkYzMtNGNlZi00NGUzLWFlOTItMTllMTM0NzEyZTky LzEvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFRuAHbV 3b24sKBVWV6sTEAWQMMEfqfM7MbHeY7g5FmeCWEytwNQsfre53JJtoXfVY2FP/Bh NYSWvhkjBGSJRpLXlGfh7YmOAXI2V1PPn85g3i2iuAb8KpTdBNqogHgjkdE5TM/e C0iLM02MIornGUEcIQGU2MRc3M7ZGatRvoq2xoAeqp3G9+kukejt+7aLOH1MmAAv BFXvQzFdQ1lC8f6BfjAjGWLujcSJnLWrN1t4JG02bxlSiKunKEImrcAjI+CMN2xk zoun7x68VO/tQNVL/+d2JtukVSnrFl3OsJfiKIfH1OhBcnu0DSL5g66ae5q5UocC ZKEkzkMYNnnSYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:00 2025 by rpki-client